What a LegitScript Badge Tells You — and What It Doesn't

A LegitScript badge is the most common trust signal in this market, and it is worth something real. It is also, on the page where you see it, an image — and an image is a claim rather than a credential. This is what the certification actually checks, what it is for, how to confirm one, and why our own register carries 182 of these claims that we have not verified.

What it genuinely checks

Start with the part that is easy to under-sell. LegitScript certification is a real review against published standards, and a seller holding one has been through something. Its healthcare standards cover licensure, valid prescriptions, patient services, affiliates and partners, privacy protections, honest and accurate operations, advertising that complies with law and platform policy, and litigation history going back ten years.^[1]

For a market where a great many sellers will not name the pharmacy that fills the vial, that is not nothing. If you are choosing between two sellers that look otherwise identical, a genuine certification is a reasonable tiebreaker.

What it is for, from the seller's side

Here is the part that is rarely explained to consumers, and it changes how you should read the badge. Certification is a paid commercial service that a merchant applies for, and LegitScript’s own account of why a business needs one is mostly about business:^[1]

• To advertise on Google, Meta, Microsoft or other major ad networks, which require it for healthcare merchants.
• To safeguard payment processing against merchant account freezes, payment holds or shutdowns caused by healthcare compliance issues.
• Because certification is required in the countries it operates in for telemedicine — the United States among them.

None of that makes it meaningless. It does mean the badge answers “can this company legally buy ads and take card payments” more directly than it answers “is this company good at medicine”. Those overlap, and they are not the same question.

The badge on the page is not the certification

This is the practical heart of it. A badge is an image file. Putting one on a website requires no more than the ability to upload a picture, and in this market we have repeatedly found sellers displaying trust marks whose underlying claim we could not substantiate at all — review scores from platforms that hold no listing for them, and star ratings attributed to no named source.

The badge is a claim. The registry entry is the credential. They are not the same object, and only one of them is on the seller’s website.

LegitScript publishes a lookup where anyone can check a website’s certification status, and that is the only thing that settles it. Do that rather than trusting the image, particularly for a seller you have not heard of.

Why we have not verified our own 183

We should be straight about this, because it is the same failure we would criticize in a seller. 182 of the 556 sellers currently listed in our register carry a LegitScript claim. Every one of those was inherited when this register was forked, none has been independently confirmed by us, and until now they fed a filter on our comparison page labeled as though we had checked.

The reason they are unverified is worth stating precisely, because it applies to you too: LegitScript’s lookup is protected by a CAPTCHA. That is entirely reasonable of them — it stops exactly the kind of bulk scraping we would otherwise have done — and the consequence is that 182 claims can only be confirmed by hand, one at a time. We are not going to pretend otherwise or work around it.

How to check one in two minutes

1. Find the badge and try to click it. A genuine one generally links to the seller’s entry. A flat image that goes nowhere is the first thing worth noticing.
2. Look the domain up on LegitScript’s own website-certification-status page, using the exact domain you are buying from rather than the brand name.
3. Check the domain matches. A group can hold certification for one property while the site you are on is a different brand. Our telehealth prescribing guide covers why the operating entity matters more than the brand.
4. Treat it as one signal among several. A named pharmacy, a licensed prescriber in your state, and a published price all tell you things certification does not.

And read the absence carefully rather than harshly. Plenty of legitimate sellers are not certified — it costs money and is aimed at merchants who need ad platforms and payment processors. Its absence is a missing signal, not a finding. Its presence, once confirmed, is a real one.